betspin[.]pro

Analysis performed on 24 July 2026 confirms that betspin.pro was operating as a crypto‑focused phishing site before being taken offline. The page title observed during the brief online period was “BETSPIN | Play at the best online casino based on Blockchain”, indicating an attempt to lure victims with a blockchain‑themed gambling proposition. VirusTotal recorded five detections out of ninety‑five scanning engines, providing moderate evidence of malicious behavior. Scamadviser assigned a trust score of 1 / 100, reflecting an extremely low reputation. No SSL certificate was presented, meaning the site served content over plain HTTP, which facilitates credential interception.

The domain is listed on a single security blocklist and was actively blocked by the PhishDestroy mitigation service. Infrastructure analysis shows registration through the SC‑GLOBAL‑DATA‑20040120 registrar, associated with ASN 42624. The hosting IP resolves to 69.5.189.58, an address located in Switzerland and announced by Global‑Data System IT Corporation (AS42624). Authoritative name servers are ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com, and ns4.nameserverhub.com.

The observed phishing kit is identified as the Gambler Scam kit, consistent with the gambling‑oriented page title. The threat classification is a crypto scam, leveraging the perceived legitimacy of blockchain gambling to harvest credentials or financial information. Defenders should continue to block the domain and associated IP at perimeter defenses, add the IP and name server patterns to internal blocklists, and monitor for any re‑registration attempts under the same registrar or similar naming patterns. Incident response teams should treat any traffic to the domain or its IP as malicious, and threat‑intel feeds should be updated to reflect the confirmed phishing activity.